- POST requests to Shopify APIs must now include a Content-Length or Transfer-Encoding: chunked header, otherwise a 411 error is returned.
- Update client libraries and custom integrations to add the required header, as older implementations may not include it automatically.
- The change aligns with RFC 7230 to mitigate request smuggling vulnerabilities.
Deprecation of POST requests without a Content-Length or Transfer-Encoding: chunked header
Official Shopify changelog summary with source attribution, release tags, and community reactions.
Track this Shopify release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Shopify release note into a weekly digest for the tools you actually use.
Create digestMore Shopify changelog updates
admin.app.intent.link intents now open as a full‑page navigation instead of an overlay modal
Adds cart session attribution and cart attributes for richer checkout data.
Added the `shop_campaign_insights` schema to ShopifyQL, letting apps query campaign performance data using the existing `shopifyqlQuery` field with the `read_reports` scope.